Channels
# apple-silicon
# arm-architecture
# auditing-warroom
# aws
# code-review
# community-feeds
# core
# darkbytes
# doorman
# ebpf
# eclecticiq-polylogyx-extension
# extensions
# file-carving
# fim
# fleet
# foundation
# fuzzing
# general
# golang
# goquery
# infrastructure
# kolide
# linux
# macos
# officehours
# osctrl
# plugins
# process-auditing
# queryhub
# sql
# tls
# uptycs
# website
# windows
# zeek
# zercurity
Channels
Hi 👋 I’ve got the following question: Say, we have some devices (Mac OS) which are online for several hours then goes offline then again turned on etc. As I got it, osquery resets its inner timer every time after it...22 Replies
1 year ago- gAh, I was wondering about that before as well. Gives it time to bake in before hitting the repos. I like it. Thanks for the heads up, didn’t realize the full process.
3 Replies
1 year ago - sDoes osquery has any support to launch extensions on-demand instead of auto loading extensions at start
8 Replies
1 year ago 
let me example my complete situation.1. First I was trying to configure osquery without remote settings. 2. I enabled process events logging using rsyslog made changes to rsyslog.conf as per documentation.template(...2 Replies
1 year ago
Hi Guys! I wanted to ask if anyone knew whether on-demand YARA scanning was working for Windows since I've been trying to test it by creating a notepad file with a string and creating a rule in the same folder, however w...10 Replies
1 year ago
Hi, is there a way to disable
while keepingfile_events
enabled. We plan to enable audit based FIM enabled while keeping inotify based FIM disabled? We want to reduce the resource consumption by ...process_file_events4 Replies
1 year ago- zDoes the profiler work on fleet yaml at all?
2 Replies
1 year ago 
Does anyone know how long fleet (by default) waits for a client check-in before it marks that client offline? Also, which client setting controls the 'check-in'? I'm guessing there may be various client actions that co...5 Replies
1 year ago
I’m having some trouble trying to determine the best path forward for client collection. We are trying to find the right settings to allow us to: • Update end user computers with new ad hoc queries and new scheduled que...2 Replies
1 year ago
Hello I am new to OSQuery and was wondering how does OSQuery gather information from the operating system? Sorry if this is a silly question.3 Replies
1 year ago